pwnf Goto Github PK

3dog-compiled

aad_prt_bof

accomplice

Tools for discovery and abuse of COM hijacks

adokit

Azure DevOps Services Attack Toolkit

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

apd_launchpad

Script for generating hostapd-wpe configuration files and spoofed certificates

arjun

HTTP parameter discovery suite.

assemblyhunter

azure-pentest-tools

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

azure-red-team

Azure Security Resources and Notes

bobthesmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

bof_collection

Various Cobalt Strike BOFs

bofallthethings

Creating a repository with all public Beacon Object Files (BoFs)

bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

build_a_phish

Ansible playbook to deploy a phishing engagement in the cloud.

cheesetools

Self-developed tools for Lateral Movement/Code Execution

chromekatz

Dump cookies directly from Chrome process memory

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

clr_heap_encryption

cobalt-clip

Cobaltstrike addons to interact with clipboard

cobaltbus

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

cobaltstrike-aggressor-scripts

A collection of Cobalt Strike Aggressor scripts.

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

cold-boot-attacks

Cold Boot Attack Tools for Linux

cookie-graber-bof

C or BOF file to extract WebKit master key to decrypt user cookie

cookie-monster

BOF to steal browser cookies & credentials

credmanbof

creds

Some usefull Scripts and Executables for Pentest & Forensics

cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

cursedchrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.